Function build_guest_environment

crates/openshell-driver-vm/src/driver.rs:4073–4163

(
    sandbox: &Sandbox,
    config: &VmDriverConfig,
    endpoint_override: Option<&str>,
)

}

fn build_guest_environment(
    sandbox: &Sandbox,
    config: &VmDriverConfig,
    endpoint_override: Option<&str>,
) -> Vec<String> {
    let openshell_endpoint = endpoint_override.map_or_else(
        || guest_visible_openshell_endpoint(&config.openshell_endpoint),
        String::from,
    );
    // 1. User-supplied environment (lowest priority).
    let user_env = merged_environment(sandbox);
    let mut environment: HashMap<String, String> = HashMap::new();
    environment.extend(user_env.clone());
    if !user_env.is_empty()
        && let Ok(json) = serde_json::to_string(&user_env)
    {
        environment.insert(
            openshell_core::sandbox_env::USER_ENVIRONMENT.to_string(),
            json,
        );
    }

    // 2. Required driver vars (highest priority -- always overwrite).
    environment.insert("HOME".to_string(), "/root".to_string());
    environment.insert(
        "PATH".to_string(),
        "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin".to_string(),
    );
    environment.insert("TERM".to_string(), "xterm".to_string());
    environment.insert(
        openshell_core::sandbox_env::ENDPOINT.to_string(),
        openshell_endpoint,
    );
    environment.insert(
        openshell_core::sandbox_env::SANDBOX_ID.to_string(),
        sandbox.id.clone(),
    );
    environment.insert(
        openshell_core::sandbox_env::SANDBOX.to_string(),
        sandbox.name.clone(),
    );
    environment.insert(
        openshell_core::sandbox_env::SSH_SOCKET_PATH.to_string(),
        GUEST_SSH_SOCKET_PATH.to_string(),
    );
    environment.insert(
        openshell_core::sandbox_env::SANDBOX_COMMAND.to_string(),
        "tail -f /dev/null".to_string(),
    );
    environment.insert(
        openshell_core::sandbox_env::LOG_LEVEL.to_string(),
        openshell_core::driver_utils::sandbox_log_level(sandbox, &config.log_level),
    );
    if config.requires_tls_materials() {
        environment.insert(
            openshell_core::sandbox_env::TLS_CA.to_string(),
            GUEST_TLS_CA_PATH.to_string(),
        );